CVE Tracker
Every vulnerability our newsroom covers, scored with CVSS, checked against CISA's Known Exploited Vulnerabilities list and ranked by EPSS exploit odds. Free to use, refreshed every few minutes.
Vendors
Microsoft33Cisco27Adobe15Linux13Check Point10JFrog10SonicWall8BeyondTrust7Google7SAP6Schneider Electric6Oracle5Apple4Barracuda Networks4
128 CVEs
EPSSCoverage
7.5CVSS 3.1
CVE-2026-34486
Exploited
Apache Tomcat: Fix for CVE-2026-29146 allowed bypass of EncryptInterceptor
Apache · Tomcat
EPSS
99%
1 story
3 months ago
8.8CVSS 3.1
CVE-2026-65617
Potential remote code execution on an Artifactory package service container.
Jfrog · artifactory
EPSS
0.65%
1 story
4 months ago
8.8CVSS 3.1
CVE-2026-65921
Potential path traversal leading to unauthorized file writes
Jfrog · artifactory
EPSS
0.59%
1 story
4 months ago
8.8CVSS 3.1
CVE-2026-66014
Potential authentication bypass leading to privilege escalation in Artifactory
Jfrog · artifactory
EPSS
0.64%
1 story
4 months ago
7.2CVSS 3.1
CVE-2026-66015
JFrog Platform contains an authorization flaw that may allow authenticated privilege escalation.
Jfrog · artifactory
EPSS
0.57%
1 story
4 months ago
8.8CVSS 3.1
CVE-2026-54121
Active Directory Certificate Services Elevation of Privilege Vulnerability
Microsoft · Windows 10 Version 1607
EPSS
1.8%
1 story
4 months ago
8.8CVSS 3.0
CVE-2017-17215
Huawei HG532 vulnerability
Huawei · HG532
EPSS
78%
1 story
4 months ago
7.0CVSS 4.0
CVE-2026-8085
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation · Arena® Simulation
EPSS
0.27%
1 story
4 months ago
7.0CVSS 4.0
CVE-2026-8312
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation · Arena® Simulation
EPSS
0.27%
1 story
4 months ago
7.0CVSS 4.0
CVE-2026-8313
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation · Arena® Simulation
EPSS
0.27%
1 story
4 months ago
7.0CVSS 4.0
CVE-2026-8314
Rockwell Automation Arena® - Memory Corruption Vulnerability
Rockwell Automation · Arena® Simulation
EPSS
0.27%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-64600
xfs: resample the data fork mapping after cycling ILOCK
Linux
EPSS
0.47%
1 story
4 months ago
7.2CVSS 3.1
CVE-2025-66376
Exploited
Synacor Zimbra Collaboration Suite (ZCS) Cross-Site Scripting Vulnerability
Synacor · Zimbra Collaboration Suite (ZCS)
EPSS
20%
2 stories
4 months ago
8.6CVSS 3.1
CVE-2024-24919
Exploited Ransomware
Information disclosure
Check Point · Quantum Security Gateways
EPSS
>99.9%
1 story
4 months ago
7.5CVSS 3.1
CVE-2026-62145
Local Privilege Escalation in Gaia Portal
Check Point · Quantum Security Gateway
EPSS
0.39%
1 story
4 months ago
8.1CVSS 3.1
CVE-2026-42533
NGINX Map directive and Regex matching vulnerability
F5 · NGINX Plus
EPSS
6.3%
2 stories
4 months ago
8.4CVSS 4.0
CVE-2025-8088
Exploited Ransomware
Path traversal vulnerability in WinRAR
RARLAB · WinRAR
EPSS
94%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-8863
CVE-2026-8863
Oracle · OracleLinux(7.2) shim
EPSS
0.11%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-53409
Zoom Rooms vulnerability
Zoom · Rooms
EPSS
0.17%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-53411
Zoom Workplace VDI Plugin for Windows - Improper Input Validation
Zoom · Workplace VDI Plugin
EPSS
0.14%
1 story
4 months ago
7.0CVSS 3.1
CVE-2026-53410
Zoom Clients for Windows - Race Condition
Zoom · Clients
EPSS
0.10%
1 story
4 months ago
7.8CVSS 3.1
CVE-2026-56155
Exploited
Active Directory Federation Services Elevation of Privilege Vulnerability
Microsoft · Active Directory Federation Services
EPSS
0.35%
2 stories
4 months ago
7.5CVSS 3.1
CVE-2018-0171
Exploited
Cisco IOS and IOS XE Software Smart Install Remote Code Execution Vulnerability
Cisco · IOS and IOS XE
EPSS
99%
1 story
4 months ago
8.1CVSS 3.1
CVE-2025-7443
BerqWP <= 2.2.42 - Unauthenticated Arbitrary File Upload
Berqwp · – Automated All-In-One Page Speed Optimization for Core Web Vitals, Cache, CDN, Images, CSS, and JavaScript
EPSS
1.0%
1 story
4 months ago
7.3CVSS 3.1
CVE-2026-3395
MaxSite CMS MarkItUp Preview AJAX Endpoint preview-ajax.php eval code injection
MaxSite · CMS
EPSS
4.0%
1 story
4 months ago
Scores and exploit data come from the CVE Program, NVD, CISA and FIRST.org. Each CVE links to SECBORN's reporting on it.